diff --git a/common/boot.nix b/common/boot.nix
index eb99def..1eb8089 100644
--- a/common/boot.nix
+++ b/common/boot.nix
@@ -10,4 +10,13 @@ in
     systemd-boot.memtest86.enable = mkIf config.nixpkgs.hostPlatform.isx86 true;
     efi.canTouchEfiVariables = true;
   };
+
+  services.resolved = {
+    enable = true;
+    fallbackDns = [ ];
+    dnsovertls = "true";
+    extraConfig = ''
+      DNS=2a07:e340::4#base.dns.mullvad.net 194.242.2.4#base.dns.mullvad.net
+    '';
+  };
 }